From 5515d22d4cfe6539e83fb44ede0f55c9fec1687e Mon Sep 17 00:00:00 2001
From: ypsdf1 <nihaoshidifu@gitee.com>
Date: Tue, 14 Jul 2026 20:25:06 +0800
Subject: [PATCH] =?UTF-8?q?security:=20=E6=94=AF=E4=BB=98=E5=AF=86?=
 =?UTF-8?q?=E9=92=A5=E6=96=87=E4=BB=B6=20git=20=E6=8B=89=E9=BB=91=20(doubl?=
 =?UTF-8?q?e=20insurance)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- .gitignore 新增 密钥文件_git拉黑.txt / pay_secrets.php / *.paykey
- 防止彩虹易支付 RSA 私钥/公钥/商户ID 误提交到 git
- 部署脚本 deploy_php_only.py 同步排除该文件防止上传公网 web 根目录
---
 .gitignore | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/.gitignore b/.gitignore
index 1c106f4..d3a11fd 100644
--- a/.gitignore
+++ b/.gitignore
@@ -16,3 +16,10 @@ self_update.php
 version_check.php
 test_sync.php
 db/debug_ip_v2.php
+
+# ===== 支付密钥 - 严禁提交 (double insurance) =====
+# 彩虹易支付 RSA 私钥/公钥/商户ID 全部在此文件，一旦进 git 或进公网 web 根目录即泄露
+密钥文件_git拉黑.txt
+pay_secrets.php
+*.paykey
+